luwenpeng
|
d7cf27a0a1
|
TSG-15204 TFE适配拦截策略user_region中删除protocol字段
|
2023-05-26 14:46:36 +08:00 |
|
wangmenglan
|
fc2625c691
|
bugfix:修复packet io内存泄漏
|
2023-05-22 15:19:29 +08:00 |
|
wangmenglan
|
b931a3dc58
|
packet io增加fieldstat状态统计
|
2023-05-15 16:41:59 +08:00 |
|
wangmenglan
|
935aa7235e
|
TFE优化解析控制报文,解决mpack只有proxy字段时,解析错误
|
2023-05-10 20:06:54 +08:00 |
|
fengweihao
|
2a55a2be75
|
bugfix:修复管控策略Policy Hits Metrics误发送pinning_status,根据route_dir发送字节数
|
2023-05-10 17:51:57 +08:00 |
|
wangmenglan
|
542f4cbdfa
|
TSG-14930 TFE支持发送控制报文给SAPP
|
2023-05-09 22:13:20 +08:00 |
|
wangmenglan
|
ceffc9b168
|
TSG-14930 TFE支持发送控制报文给SAPP
|
2023-05-09 14:23:39 +08:00 |
|
luwenpeng
|
7c3b77fb2f
|
TSG-14890 TFE输出Intercept Policy Hits Metrics
|
2023-05-08 15:32:55 +08:00 |
|
wangmenglan
|
5dcc85c1ee
|
解决编译报错
|
2023-05-06 20:48:09 +08:00 |
|
wangmenglan
|
8de8ec1c5f
|
TSG-14938 TFE支持新控制报文格式; 调整代码结构
|
2023-05-06 17:53:08 +08:00 |
|
wangmenglan
|
8a7c196c20
|
修改文件编码
|
2023-05-06 17:47:47 +08:00 |
|
wangmenglan
|
11a46269f1
|
将kni合并到tfe中
|
2023-05-06 17:47:38 +08:00 |
|
luwenpeng
|
e729c5cee9
|
修改__cplusplus->__cpluscplus
|
2023-04-28 17:45:13 +08:00 |
|
luwenpeng
|
ba64327e2f
|
TSG-14898 TFE适配PXY_INTERCEPT_COMPILE,执行Intercept或No Intercept
|
2023-04-28 15:06:28 +08:00 |
|
fengweihao
|
3523e8a951
|
fieldstat3的metrc支持输出vsysid
|
2023-04-26 16:12:29 +08:00 |
|
fengweihao
|
b9a8a45540
|
优化fieldstat3句柄创建
|
2023-04-25 16:17:35 +08:00 |
|
fengweihao
|
0bb38a6969
|
TSG-14786 TFE输出Proxy Rule Hits Metric
|
2023-04-25 10:13:38 +08:00 |
|
luwenpeng
|
95c80c80cf
|
BPF适配不同的编译环境
|
2023-04-23 19:16:28 +08:00 |
|
luwenpeng
|
cbf424884c
|
cmsg适配控制报文类型, TFE_CMSG_SSL_INTERCEPT_STATE/TFE_CMSG_SSL_PINNING_STATE/TFE_CMSG_SSL_CERT_VERIFY的类型从uint64改为uint8
|
2023-04-23 16:55:30 +08:00 |
|
luwenpeng
|
2138d7f13e
|
TFE适配MAAT4,编译表只注册一次
|
2023-04-23 16:35:42 +08:00 |
|
luwenpeng
|
97a4386bc4
|
TSG-14829 io_uring支持触发事件,适配mrzcpd的epoll_wait功能
|
2023-04-21 20:30:26 +08:00 |
|
luwenpeng
|
f421e4df54
|
TSG-14789 TFE扫描service chaining策略,执行Decrypted Traffic Steering
|
2023-04-21 18:31:36 +08:00 |
|
luwenpeng
|
f741c3c025
|
TSG-14628 TFE适配TCP Option Profile库表的变更
|
2023-04-21 18:31:36 +08:00 |
|
fengweihao
|
915dd00731
|
TSG-14704 用户自定义域中带有特殊字符策略无法生效
TSG-14703 扫描ip和app_id后策略没有执行
|
2023-04-13 14:34:34 +08:00 |
|
fengweihao
|
ed9a4739a1
|
TSG-14379 Monitor策略日志多命中情况下Vsys ID填写错误
|
2023-04-04 16:06:40 +08:00 |
|
fengweihao
|
26b533cba9
|
bugfix:引用错误的头文件,导致CI构建失败
|
2023-03-30 20:03:00 +08:00 |
|
fengweihao
|
df39fcda90
|
TSG-14484 Pxoxy支持Maat4
|
2023-03-30 19:39:18 +08:00 |
|
luwenpeng
|
fdf203b25e
|
NF QUEUE未配置eth时,默认不绑定eth device
|
2022-12-26 17:09:33 +08:00 |
|
luwenpeng
|
29a75b1d9c
|
TSG-13157 Decrypted Traffic Steering构造的SYN/SYN ACK支持窗口扩大选项
|
2022-12-26 14:31:22 +08:00 |
|
luwenpeng
|
9d12fe7304
|
TSG-13114 TFE的Decrypted Traffic Steering功能支持IPv6协议
tfe-env.service中增加Decrypted Traffic Steering的策略路由
|
2022-12-23 13:56:19 +08:00 |
|
luwenpeng
|
7978e74321
|
TSG-13042 构造三次握手报文,通过原始套接字注入tap_client和tap_server
|
2022-12-23 13:56:19 +08:00 |
|
luwenpeng
|
c1d9a1ab0f
|
Decrypted Traffic Steering 回流回注测试通过
|
2022-12-23 13:56:19 +08:00 |
|
fengweihao
|
6e4fc2a978
|
TSG-12300 代理日志增加Traffic Vsys id字段
|
2022-11-11 02:09:15 +00:00 |
|
luwenpeng
|
87adce7cbf
|
TSG-12548 TFE适配拦截策略的keyring_for_untrusted字段
* keyring拆分为keyring_for_trusted与keyring_for_untrusted
|
2022-11-08 11:18:53 +08:00 |
|
fengweihao
|
d4dc6394ac
|
TSG-12005 Proxy日志增加common_vsys_id字段
TSG-12080 中间证书缓存Kafka输出Json增加vsys_id字段
|
2022-09-23 15:34:50 +08:00 |
|
fengweihao
|
b321486e3f
|
TSG-11849 tfe增加从环境变量中读入处理机ip
TSG-11742 IP Libraries统一使用.分隔地理层级
TSG-10722 日志中开始时间从解析层获取
|
2022-09-09 10:44:11 +08:00 |
|
fengweihao
|
421723f758
|
TSG-9860 修复代理策略无法支持三级归属地命中
|
2022-03-03 18:28:29 +08:00 |
|
fengweihao
|
9ddc606ac5
|
TSG-9422 TSG-9554 TSG-9470 修复元素编辑MARK问题, 代理支持4级或以上定位库
|
2022-02-11 09:57:33 +08:00 |
|
luwenpeng
|
e2be64b67b
|
TSG-4030 Security Event Logs 中的 SSL.Intercept State 为 Passthrough 时,并未说明引起 Passthrough 的原因
(当命中 tcp passthrough 时,将 ssl_intercept_status 设置为 passthrough)
|
2022-01-28 13:10:26 +08:00 |
|
luwenpeng
|
cb15d3340f
|
bugfix: TSG-8003 预防证书链投毒
* 中间证书缓存openssl rebuild trust chain中可惜的中间证书, 不缓存服务端发送证书链中的证书
|
2021-11-03 16:24:09 +03:00 |
|
fengweihao
|
665c47295a
|
TSG-8057 Proxy新增公共日志字段common_device_tag
|
2021-10-18 18:29:10 +08:00 |
|
fengweihao
|
8d8b5eb039
|
bugfix:修复rdkafka头文件路径变更导致CI构建失败
|
2021-09-13 16:39:42 +08:00 |
|
fengweihao
|
c41a67ca2b
|
TSG-7471 Proxy连接kafka时增加认证信息
|
2021-08-19 16:24:19 +08:00 |
|
luwenpeng
|
19a3fe9217
|
TSG-6228 修复 ATCA 性能测试时 perf 火焰图显示 tfe_stream_addr_to_str 耗时较高的问题
|
2021-04-28 18:01:59 +08:00 |
|
luwenpeng
|
1fe60d2428
|
废除 tfe-kmod, tfe 直接与 kni 通信
* 新增 enable_kni_v3=1 配置项
* develop_build_release 分支关闭 ASAN 检测
* 修正根据 CMSG 恢复 TCP 链接时没有正确填写 TCP 时间戳启用选项的问题
|
2021-04-21 13:26:07 +08:00 |
|
luwenpeng
|
1c37ae746d
|
TSG-5978 TFE 与 KNI 保活的 watchdog 线程增加对 tfe worker 线程健康状态检测的功能
|
2021-04-21 11:51:30 +08:00 |
|
luwenpeng
|
933f9e3b02
|
TSG-4965 功能端通过界面下发的 JA3 Fingerprint 识别 Pinning APP 和未装根证书的 APP
|
2021-01-06 17:28:53 +06:00 |
|
fengweihao
|
17bbb54343
|
TSG-4524 panggu和doh日志字段设置common_direction
|
2020-12-15 12:56:07 +08:00 |
|
luwenpeng
|
012f4f6602
|
TFE 适配 fieldstat prometheus
|
2020-11-13 20:55:56 +06:00 |
|
fengweihao
|
b1c3ba754a
|
管控策略日志增加字段common_data_center
管控策略统计计数修改
解密流量删除用户自定义判断fata日志
|
2020-10-29 11:29:48 +08:00 |
|